{"vulnerability": "cve-2026-1598", "sightings": [{"uuid": "9ada3544-6eca-474b-8034-e8b6a7825cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlnkuyrqt2n", "content": "", "creation_timestamp": "2026-01-29T20:41:31.848728Z"}, {"uuid": "5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzjm4yarb2z", "content": "\ud83d\udfe0 CVE-2026-15988 - High (8.8)\n\nThe AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T13:00:41.342391Z"}, {"uuid": "57b33cca-18cc-4ea5-bc98-933a1e7bec6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxma4lnn2v", "content": "CVE-2026-15988: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 AI Engine \u0434\u043b\u044f WordPress - \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/A3C87B53-32E7-42A6-AC5C-5C27E38BC236", "creation_timestamp": "2026-08-01T17:11:13.746195Z"}, {"uuid": "7676253c-07b6-47d9-8d3c-314ee3b44970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxmoptvl2c", "content": "CVE-2026-15988: \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df AI Engine \u05dc\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 - \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea?\n\n\n\nhttps://khesef.xyz/posts/A79AFABF-6CEB-4093-B9DE-B64F6CD89176", "creation_timestamp": "2026-08-01T17:11:28.553457Z"}, {"uuid": "3ea25a8f-b4a3-4c61-9a3d-74510e32ef61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms22pcpgwe2a", "content": "CVE-2026-15988 - CSRF in AI Engine WordPress plugin enables attacker to create admin accounts via REST auth bypass. CVSS 8.8. Unpatched - disable plugin now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15988/", "creation_timestamp": "2026-08-01T18:06:38.142151Z"}, {"uuid": "dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mryzu3tlv423", "content": "AI Engine, a WordPress plugin on 100,000+ sites, has a flaw: one link a logged-in admin clicks can create a hidden admin account for an attacker.\n\nAffects versions up to 3.6.5; no attacker login needed.\n\nFix: update to 3.6.6+. (CVE-2026-15988)", "creation_timestamp": "2026-08-01T08:18:46.001416Z"}, {"uuid": "d702afaf-d775-468f-8db0-07a28ad83a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ugqtucjoanp2", "content": "CVE-2026-15988 - AI Engine\nCVE ID : CVE-2026-15988\n \n Published : Aug. 1, 2026, 8:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all version...", "creation_timestamp": "2026-08-01T09:44:26.268769Z"}, {"uuid": "0fa07bd6-d2c1-4310-9c4e-66c62e3bd479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15982", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqt2kgy3tm2y", "content": "CVE-2026-15982 - aimogen pro - all-in-one ai content writer, editor, chatbot & automation toolkit\nThe Aimogen Pro plugin for WordPress allows unauthorized users to create admin accounts and gain full control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coderevolution #CVE #infosec", "creation_timestamp": "2026-07-17T05:50:05.638599Z"}, {"uuid": "7f7757c7-4ec6-440c-8c1c-812aba32cc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15982", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116933789451136259", "content": "CVE-2026-15982 | CodeRevolution Aimogen Pro (\u22642.8.4) has a CRITICAL privilege escalation flaw \u2014 attackers can leverage missing capability checks to create admin accounts. Urgent patching advised. https://radar.offseq.com/threat/cve-2026-15982-cwe-269-improper-privilege-manageme-e0b1a13e8364d483 #OffSeq #WordPress #Vulnerability #Infosec", "creation_timestamp": "2026-07-17T06:00:28.436179Z"}, {"uuid": "3820e339-18fa-46fa-9270-5093d33cb5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15982", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqt352xi3y26", "content": "Privilege escalation vulnerability (CRITICAL) in CodeRevolution Aimogen Pro for WordPress (\u22642.8.4) lets attackers create admin accounts. Restrict plugin use and monitor access. https://radar.offseq.com/threat/cve-2026-15982-cwe-269-improper-privilege-manageme-e0b1a13e8364d483 #OffSeq #WordPress #...", "creation_timestamp": "2026-07-17T06:00:30.553804Z"}, {"uuid": "71d3962d-2a4a-4a80-b9fb-5a31cd66ddf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15982", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqt5wjf5ij27", "content": "CVE-2026-15982 - Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit\nCVE ID : CVE-2026-15982\n \n Published : July 17, 2026, 6:16 a.m. | 18\u00a0minutes ago\n \n Description : The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation ...", "creation_timestamp": "2026-07-17T06:50:31.525673Z"}, {"uuid": "81945df5-114b-43b1-8b8d-ec2e7550c910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15982", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqtijahhqj2r", "content": "\ud83d\udd34 CVE-2026-15982 - Critical (9.8)\n\nThe Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for W...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15982/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-17T09:59:57.263461Z"}, {"uuid": "553949eb-69c7-443e-af46-8cf1629fe4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcxw2hw2y", "content": "CVE-2026-15981 - saml single sign on \u2013 sso login\nA security flaw in the WordPress SSO plugin allows attackers to log in as any user, including administrators, without a password. This is a serious risk because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-07-23T21:20:05.939090Z"}, {"uuid": "e81635e2-72a9-4b7a-bbf2-13fc56cbca4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrk4rv32bq2i", "content": "\ud83d\udd34 EXPLOITED\n\nA public exploit is out for a critical flaw in miniOrange's SAML single sign-on plugin for WordPress (CVSS 9.8).\n\nIt lets anyone log in as an admin, no password needed.\n\nAffects 10,000+ sites on 5.4.4 or older. Fix: update to 5.4.5. (CVE-2026-15981)", "creation_timestamp": "2026-07-26T10:01:16.638613Z"}, {"uuid": "297a0e8f-a40b-47ca-93d8-e89ef7957619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-26T22:00:03.674987Z"}, {"uuid": "eff0b96a-afd6-4a73-b7a0-1895d629c714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "Telegram/oYN9diVg7I38yCrVGgTerONHpAHmOmUvLdx-0Vt-uNCO0ik", "content": "", "creation_timestamp": "2026-07-26T15:00:28.713896Z"}, {"uuid": "23ee41cf-d7e1-49ed-b7e6-aada70c86df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "published-proof-of-concept", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-27T00:00:09.148687Z"}, {"uuid": "6eb418b7-2c56-40d4-8abd-69515b2d4a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "published-proof-of-concept", "source": "Telegram/oYN9diVg7I38yCrVGgTerONHpAHmOmUvLdx-0Vt-uNCO0ik", "content": "", "creation_timestamp": "2026-07-27T00:00:25.346364Z"}]}